PT-2023-27049 · Prestashop+1 · Theme Volty Cms Category Chain Slider+1
CVE-2023-39646
·
Publicado
2023-10-03
·
Atualizado
2023-10-05
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Theme Volty CMS Category Chain Slider module for PrestaShop versions up to 4.0.1
Description
The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Chain Slider module for PrestaShop. This allows a guest to perform SQL injection in affected versions.
Recommendations
For versions up to 4.0.1, consider disabling the
tvcmscategorychainslider module until a patch is available to prevent SQL injection attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Prestashop
Theme Volty Cms Category Chain Slider